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IN TPre CLAIMS 

No amendments are made to the claims, which are presented below for the Examiner's 
convenience: 

1. (ORIGINAL) A method of $comng a token from unauthorized use, comprising die 
steps of: 

receiving a first message transmitted £i:ota a host processing device and addressed to a PIN 
entiy device according to a universal serial bus (USB) protocol; 
accepting a PIN entered into die PIN entry device^ and 

transmitting a second message comprising at least a portion of the first message and the PIN 
ficom the PIN entry device to the token along a secure communication path. 

2. (ORIGINAL) The mediod of claim 1. wherein: 
the first message is received in the PIN entry device; and 

the second message is transmitted from the PIN entry device directly to the token along the 
secure communication path. 

3. (PREVIOUSLY PRESENTED) The mediod of claim 1, wherein: 

the step of receiving the first message transmitted from a host processing device and 
addressed to a PIN entry device comprises the steps of: 

receiving the first message in a USB-compliant hub communicatively coupled to the 
host processing device via a first cotnmunication path; 

transmitting the first message to the PIN entry device communicatively coupled to 
die USB-compliant hub; and 

the step of ttaxismitting die second message comprising the portion of die first message and 
the PIN and at least a portion of the first message from the PIN entry device to the token along a 
secure communication path comprises the steps ofi 

transmitting a second message from the PIN entry device via the USB-compliant hub. 
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4. (ORIGINAL) The method of claim 3, wherein the step of transmittmg the second 
message from the PIN entry device via die USB-compliant hub comprises the steps of: 

transmitting a third me$sage compiisiiig the PIN from the PIN entty device to die USB- 
compliant hub; 

processing the message in the USB-compIiant hub to produce die second message; and 
transmitting the second message from the USB-compliant hub. 

5. (ORIGINAL) The method of claim 1> wherein the signal received from die host 
processing device is generated in an API interfece. 

6. (PREVIOUSLY PRESENTED) The mediod of claim 1, wherein: 
the first message is encrypted accordtag to a first encryption key; and 

the PIN entry device comprises a decryption module having access to the first encryption 
key for decoding the first message. 

7. (ORIGINAL) The method of claim 1, wherein the second message is transmitted to 
the token according to a USB-compliant protocol 

8. (ORIGINAL) The method of claim 1, wherein the second message is encrypted 
according to a second encryption key and the token comprises a decryption module having access to 
tiie second encryption key. 
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9. (ORIGINAL) The method of claim 1, wherein the step of transmitting the second 
message fcom the PIN cntiy device to the token ftuthot comprises the step of; 

cnctyptitig the second message according to a second encryption key stored in the PIN entry 
device and the token; and 

transmitting the encrypted second message to the token. 

10. (ORIGINAL) The method of claim 1, wherein the first message is a message 
tcanstnitted from the host processing device to authorize a transaction. 

11. (ORIGINAL) The method of daim 1, wherein the first message is a message 
transmitted ficom the host processing device to authenticate a xiser of the token. 

12. (ORIGINAL) An apparatus for securing a token £com unaudiorized nse, 
comprising: 

a PIN entry device, communicably coupleablc to a host processing device transmitting a first 
message addressed to the PIN entry device, and communicadyely coupleablc to the token according 
CO a universal serial bus USB protocol, the PIN entry device comprisiag: 
a user input device, for accepting a user-input PIN; and 

a ptoccsacur, communicatively coupled to the u$er input device, the processor fox 
receiving the first message and combining the first message with the user-input PIN, and for 
producing a second message having at least a portion of the first message and the user-input PIN. 

13. (ORIGINAL) The apparams of claim 12, wherein the first message is encrypted 
accordiog to a first encryption key and the PIN entry device further comprises: 

a module for decrypting the first message fcom the host processing device according to a 
first encryption key. 

14. (ORIGINAL) The apparatus of claim 13, wherein tlie module is a software module 
having mstructions stored in a memory accessible to the processor. 
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15. (ORIGINAL) Tte apparatus of claim 14, wherein the PIN entry device further 
comprises: 

a second module for encrypting the second message according to a second exxcryption key. 

16. (ORIGINAL) The appararuii of claim 15, wherein the second modiile is a software 
module having instructions scored ia a memory accessible to the processor. 

17. (ORIGINAL) The apparams of daim 12, wherein the PIN entry device further 
comprises an output device for prompting the user to enter the PIN. 

1 8. (PREVIOUSLY PRESENTED) A mediod for securing a token from unauthorized 
use, comprising: 

intercepting a first message &om die host processing device addressed to the token in a hub; 
providing the intercepted message to a PIN entry device communicatively coupled to the 

hub; 

accepting a second message from the PIN entry device comprising a user-entered PIN; 
generating a third message from the second message, the third message comprising the user- 
entered PIN and at least a portion of the first message; and 

ttaasmitdng the third message from the USB-compliant hub to the token. 
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19. (ORIGINAL) The method of rl^iitn 18, forth ex comprising the step of: 
encrypting the third message according to a first encryption key stored in a memory of die token 
before transmitting the third message to the token. 

20. (OKJGINAL) An apparatus for secixdng a token from unauchorbed use, 
comprising: 

a USB-compliant hub» cotnmunicably coupleable between a host processing device and die 
token, die USB compliant hub having; 

means for intercepting a message addressed to the PIN entry device; 

means for generating a third message ficom the first message and a user-entered PIN; 

and 

means for transmitting die third message to the token; 
a PIN entry device3 communicatively coupled to USB-compliant hub, for accepting a user- 
entered PIN and providing die user-entered PIN to the USB-compliant hub. 

21. (ORIGINAL) The apparams of claim 20, wherein die means for intercepting a 
message addressed to die PIN entcy device, the means for generating the third message from the 
first message and a user-entered PIN and the means for transmitting the third message to the token 
comprises at least one processor having at least one communicattvely coupled memory storing 
processor insixucrions for intercepting a message addressed to the PIN enny device, for generating 
the third message from the first message and a user-entered PIN, and for transmitting the third 
message to the token. 

22. (ORIGINAL) The apparatus of claim 20, wherein the USB-compliant hub further 
comprises a means for encrypting the third message according to an encryption key stored in a 
memory of the token. 
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23, (ORIGINAL) The apparatus of claim 22, wherein the means for inteicepring a 
message addressed to the PIN entty device, the means for generaong the third message &om the 
first message and a user-entered PIN, the means for encrypting the third message according to an 
encryption key stored in the memory of the token and the means for transmitting the third message 
to the token comptises at least one processor having at least one communicatively coupled memory 
storing processor instructions for intercepting a message addressed to die PIN entry device, for 
generating the tiaird message ficom the first message and a user-entered PIN, for encrypting the third 
message according to an encryption key stored in the memory of the token and for transmitting the 
third message to the token. 
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